stablecoin-info-fetch
Fetches and verifies detailed metadata for stablecoins, ensuring accuracy in collateral, peg mechanisms, and jurisdictional information.
Install this skill
or
91/100
Security score
The stablecoin-info-fetch skill was audited on Mar 1, 2026 and we found 9 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
low line 33
External URL reference
SourceSKILL.md
| 33 | - **CoinGecko**: `https://api.coingecko.com/api/v3/coins/{geckoId}` — returns contract addresses (with decimals via `detail_platforms`), links, categories, description, all in structured JSON. Use `ht |
low line 35
External URL reference
SourceSKILL.md
| 35 | - Ethereum: `https://api.etherscan.io/api?module=token&action=tokeninfo&contractaddress={addr}` |
low line 36
External URL reference
SourceSKILL.md
| 36 | - Arbiscan: `https://api.arbiscan.io/api?module=token&action=tokeninfo&contractaddress={addr}` |
low line 37
External URL reference
SourceSKILL.md
| 37 | - BaseScan: `https://api.basescan.org/api?module=token&action=tokeninfo&contractaddress={addr}` |
low line 39
External URL reference
SourceSKILL.md
| 39 | - **DefiLlama**: `https://stablecoins.llama.fi/stablecoin/{id}` — chain-level supply breakdown, no auth needed |
low line 55
External URL reference
SourceSKILL.md
| 55 | - **DefiLlama chain data**: `WebFetch` `https://stablecoins.llama.fi/stablecoin/{id}` (for numeric IDs) to get chain-level supply breakdown. If DL reports supply on a chain we don't have a contract fo |
low line 57
External URL reference
SourceSKILL.md
| 57 | 1. `WebFetch` `https://api.coingecko.com/api/v3/search?query={symbol}` — find/confirm the geckoId by matching on name+symbol in the results |
low line 58
External URL reference
SourceSKILL.md
| 58 | 2. `WebFetch` `https://api.coingecko.com/api/v3/coins/{geckoId}?localization=false&tickers=false&market_data=false&community_data=false&developer_data=false` — get contract addresses (use the `detail_ |
low line 67
External URL reference
SourceSKILL.md
| 67 | - **Block explorer APIs for verification**: For every contract address found from any source, verify via the explorer API that the token name, symbol, and decimals match. This prevents adding a proxy |
Scanned on Mar 1, 2026
View Security DashboardInstall this skill with one command
/learn @tokenbrice/stablecoin-info-fetchGitHub Stars 6
Rate this skill
Categorydata analytics
UpdatedMarch 29, 2026
TokenBrice/stablecoin-dashboard